Data Breach Notifications

Entity Information

  • Type of Organization: Other Commercial
  • Entity Name: Shutterfly, LLC
  • Street Address: 2800 Bridge Parkway
  • City: Redwood City
  • State, or Country if outside the US: California
  • Zip Code: 94065

Submitted By

  • Name: Corey Goldstein
  • Title: Mr.
  • Firm name (if different than entity): Debevoise & Plimpton LLP
  • Telephone Number: 212-909-6283
  • Email Address: cjgoldst@debevoise.com
  • Relationship to entity whose information was compromised: Outside counsel

Breach Information

  • Total number of persons affected (including residents): 52,777
  • Total number of Maine residents affected: 70
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified:
  • Date(s) Breach Occured: 12/03/2021
  • Date Breach Discovered: 12/13/2021
  • Description of the Breach:
    • External system breach (hacking)
  • Information Acquired - Name or other personal identifier in combination with: Social Security Number

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 03/02/2022; 03/14/2022; 05/12/2022
  • Copy of notice to affected Maine residents: Shutterfly Sample Individual Notification Letter.pdf
  • Date of any previous (within 12 months) breach notifications: 02/24/2022
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: 24 months of credit monitoring services provided by Equifax. Services include one bureau credit monitoring, fraud consultation, and identity theft restoration.